====== Computer Virus Catalog 1.2: TimeBomb_09 Bomb (31-July-1993) =====
Entry...............: TimeBomb_09 Bomb
Alias(es)...........: .info Time Bomb
Virus Strain........: ---
Virus detected when.: ---
              where.: ---
Classification......: Time bomb
Length of Virus.....: Length of file: 7840 bytes (+1 byte in "pic.xx")
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-OS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes ---------------------------------------
Easy Identification.: There is a "startup-sequence" entry called
                         ".info", and there is always a 2nd file called
                         "pic.xx" with 1 byte length in root directory
                         (serving as counter).
                      If diskette is write protected, bomb writes to
                         Shell: "User Request: Please remove write
                         Protection and press left Mouse Button to
                         continue.."
Type of infection...: None (damage-only)
Infection Trigger...: ---
Storage media affected: Floppy disks only
Interrupts hooked...: ---
Damage..............: Permanent damage: formating floppy disks
Damage Trigger......: Starting this program when the specific byte in
                         "pic.xx" counted down to zero.
Particularities.....: ---
Similarities........: VirusTest bomb (seems to be an "older version")
--------------------- Agents -------------------------------------------
Countermeasures.....: VirusZ 3.06, VT 2.54, VirusChecker 6.28
Countermeasures successful: VirusZ 3.06, VT 2.54, VirusChecker 6.28
Standard means......: Delete files ".info", "pic.xx" and the
                         "startup-sequence" entry, or use VT 2.54.
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Jens Vogler
Documentation by....: Jens Vogler
Date................: 31-July-1993
Information Source..: Reverse analysis of virus code
===================== End of TimeBomb_09 Bomb ==========================

[Go back]